RE: field level security - (Was Use of a trigger...? ....)

I realize this is a "down-the-road" question, but:
1) Are you talking about program access to the data, or any access to the
data?
2) If an individual later decides to waive FERPA, how do you change the
status? If you have a control file with customer ID and FERPA status,
somewhere, someone controls access to that object.

I think few businesses realize just how much impact FERPA and HIPPA will
have on them.

Loyd

-----Original Message-----
From: Booth Martin [mailto:booth@MartinVT.com]
Sent: Friday, January 25, 2002 10:44 AM
To: midrange-l@midrange.com
Subject: Re: field level security - (Was Use of a trigger...? ....)

<snip>

The actual business rules aren't yet established because there is great
controversy going on as to what the regulations actually are, but the
consensus is that if an individual elects FERPA then the individual's
information can not be sold for mailing lists.  It also means we can't tell
the hospital the name of the individual's next of kin.